CVE-2026-48272: falha de alta gravidade em Adobe Creative Cloud Desktop
Creative Cloud Desktop | Uncontrolled Search Path Element (CWE-427)
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7.8epss 0.2%
Creative Cloud Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue does not require user interaction. Scope is changed.
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Produtos afetados
Adobe · Creative Cloud DesktopCVEs relacionadas — Adobe Creative Cloud Desktop
No mesmo produto, das mais perigosas para as menos.
CVE-2024-34116HIGHAdobe Creative Cloud App Install Arbitrary Folder Delete Vulnerability can be abuse to Privilege EscalationEPSS 0.3%CVE-2025-64896MEDIUMCreative Cloud Desktop | Creation of Temporary File in Directory with Incorrect Permissions (CWE-379)EPSS 0.2%CVE-2026-48344HIGHGoCart | Time-of-check Time-of-use (TOCTOU) Race Condition (CWE-367)EPSS 0.2%CVE-2025-54271MEDIUMCreative Cloud Desktop | Time-of-check Time-of-use (TOCTOU) Race Condition (CWE-367)EPSS 0.1%